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\ encrypted data and random data stored therein, said encrypted data having been 
encrypted according to an encryption key which is based on said random data, and wherein said 
random data is selectecKfrom a predetermined portion of a random file which is generated by a 
pseudo random generator and was recorded on predetermined regions on the same surface as the 
encrypted data on said storage area.— 

—94. The recording nMum according to claim 93, further comprising stored 
therein data indicative of the portion of saichandom file corresponding to said random data.— 

-95. A recording medium comprising: 

a storage area for storing data; and \ 

encrypted data stored therein, said encrypte&sdata having been encrypted by using 
a second encryption key, wherein said second encryption key issgenerated based on a first 
encryption and a third encryption key, said first encryption key whush being based on key data 
which is recorded on predetermined regions on the same surface as the encrypted data and 
determined from said recording medium yet is not part of said encrypted dara- and said third 
e ncryption key being independent of said first encryption key.— \ 

REMARKS \ 

In light of the above amendatory matter and remarks to follow, reconsideration 
and allowance of this application are requested. This Amendment is responsive to the Final 
Office Action in the parent case of August 6, 1998. 

The Examiner's remarks in the last Official Action in the parent application have 
been carefully considered. In response, Applicants' representative believes that all of the claims 
in this application are allowable. 
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The Applicants have made numerous amendments to the specification. The 
amendments are indicated in the "mark-up" copy of the specification submitted herewith, and 
they include the revisions specified by the Examiner in an Office Action in the parent case. The 
amendments are made for purposes of clarification and they do not add any new matter to the 
application. 

The drawings are corrected as requested in an Office Action in the parent case in 
accordance with the Request for Approval of Drawing Change submitted herewith. 

In this Amendment, claims 60-95 have been added which are the same as claims 
60, 63, 66-88, 96, 98, 102, 103 and 107-1 13 in the parent case. 

In the Final Office Action of the parent case claims 69-87, 96 and 102 (which are 
now claims 65-83, 85 and 87) were rejected under 35 U.S.C. §112, second paragraph, as being 
indefinite. Claims 65, 76, 79, 85 and 87 have been rewritten to overcome the rejections. 
Therefore Applicants request that the rejection of these claims based upon 35 U.S.C. §112, 
second paragraph, be withdrawn. 

Claims 107-1 13 (now claims 89-95) were rejected under 35 U.S.C. §112, first 
paragraph because the specification does not reasonable provide enablement for the "single 
means" claims. Claims 107-1 13 (now claims 89-95) were rejected under 35 U.S.C. §101 because 
they are non-statutory. These claims have been rewritten to overcome the rejections. Therefore 
Applicants request that the rejection of these claims based upon 35 U.S.C. §101, be withdrawn. 

Claims 60, 63, 66-69, 80-88, 96, 98, 102, 103, 107, 108, 1 1 1 and 1 12 were 
rejected under 35 U.S.C. § 1 02(b) as being anticipated by Narasimhalu et al. ('718). Claims 63, 
66, 83, 84, 87, 88, 102, 103, 107 and 108 35 U.S.C. § 102(e) as being anticipated by Kikinis 
( c 947). Claims 63, 66, 88 and 107 are rejected under 35 U.S.C. §102(e) as being anticipated by 
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Kondo ('773). Claims 70-79 are rejected under 35 U.S.C. §103 as being unpatentable over 
Narasimhalu et al. ( c 718). In response, the rejections are traversed for the following reasons. 

Applicants' invention as recited in rewritten independent claim 60 requires 
generating an encryption key based on data which is " recorded to predetermined regions on the 
same surface as the encrypted data and determined from said recording medium vet is not part of 
said encrypted data ." Applicants' claims therefore require that the data on which the encryption 
is based be recorded on the surface of the disk. Also, the data must be recorded on the same 
surface of the disk. 

Narashimhalu et al. merely discloses using selected defects in the disk surface and 
not data recorded on the disk to encrypt information on the disk. Kondo merely discloses to 
record encrypting information on the edge of the disk. Kikinis merely discloses selectively 
obliterating the readability of bits in addressable sectors to encode data. None of the cited 
references teach or suggest the above features of the present invention. Therefore, withdrawal of 
the rejections are respectfully requested. If the Examiner does not withdraw the rejections, the 
Examiner is requested to identify those elements of the references which support his rejections. 

Independent claims 61-62, 65, 76, 79, 84-89, 91, 93 and 95 include limitations 
corresponding to independent claim 60, and will not be analyzed to avoid repeating the above 
analysis. It is apparent, however, that claims 61-62, 65, 76, 79, 84-89, 91, 93 and 95 are 
distinguishable over the prior art for the same reasons as claim 1 discussed hereinabove. 

Due to their dependency, claims 66-75, 77-78, 80-83, 90, 92 and 95 incorporate 
all of the limitations of the independent claims including the above-discussed features. It is 
apparent, therefore, that dependent claims 66-75, 77-78, 80-83, 90, 92 and 95 are, at a minimum, 
distinguishable over the prior art for the same reasons as Applicants' independent claims. 
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In light of the above, Applicants' representative traverses the Examiner's 
rejections and respectfully submits that the references, alone or in combination do not teach or 
suggest all of the features of the present invention, as claimed. In view of the foregoing 
amendments and remarks, it is believed that all of the claims now in this application are 
patentable over the prior art. Early and favorable consideration thereof is solicited. On the basis 
of the above amendments and remarks, reconsideration and allowance of this application are 
respectfully requested. 

The above statements concerning the disclosures in the cited references represent 
the present opinion of Applicants' representative and, in the event that the Examiner disagrees, 
Applicants' representative respectfully requests the Examiner specifically indicate those portions 
of the respective references providing the basis for a contrary view. 

Applicants' representative agrees with the Examiner that the prior art made of 
record and not relied upon is not as relevant to the claimed invention as are the references upon 
which the Examiner has relied. 

In the event that additional cooperation in this case may be helpful to complete its 
prosecution, the Examiner is cordially invited to contact Applicant's representative at the 
telephone number listed below. 

The Commissioner is hereby authorized to charge any insufficient fees or credit 

any overpayment associated with the above-identified application to Deposit Account 50-0320. 

Respectfully submitted, 

FROMMER LAWRENCE & HAUG LLP 

By: 

/ William S. F^ommer 
Reg. No. 25^506 
(212) 588-0800 
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ENCRYPTING METHOD AND APPARATUS, RECORDING METHOD, 
DECRYPTING METHOD AND APPARATUS, AND RECORDING MEDIUM 

BACKGROUND OF THE INVENTION 

1. Field of the Invention: 

an 

The present invention relates to^encrypting method 
and apparatus, ^decrypting method and apparatus, and a recording 
medium in which information encrypted by an encrypting method or 

a/ <y pore* farViCut^TW -ho <lr\ 

an encrypting apparatus is recordedjjand^/ f o r oxampXc^ 

a ^ 

encryptxng method and apparatus , A decrypting method and 
apparatus, and a recording medium suitable for use in a system 
in which information such as video signals, audio signals, data 
signals or the like is encrypted, the encrypted information is 
recorded on a recording medium, and the encrypted information is 
decrypted . 

2. Description of the Related Art: 



.1 / £ 0 r rfLc$^&\<\z 

Jyp\C^\j jtfheri information is encrypted/ ^Mid . fchon sooorete d on a 

racmined ■ recording medium,y\inf ormation is encrypted by 



using a predetermined encryption key, aiid t ho - enciy p i le d 

A 

4 n£ormat>io - n - 3? g^e€o^ The encrypted 

information is decrypted by using a decryption ke^ for 
doorypting Lhu eiiuiyjJU i a ll 'l fuiiira-ui u n lu tju ndud uu Lliu l uc u id iu^ 

j/|^ orypt a s y Eitom ■ emplo y i n g , a key (an encryption key) 

include^/ two cryptosystoms ;# a common-keyx cgyptographio oohomo 

A 

and a public-key cryptosystem. In the common-key cryptosystem, 
a key (encryption key) used upon encryption is the same as a key 



(decryption key) used upon decryption. For QKOmp3rc , of uhu. 
oeHnaen-ke^ Li^plusybieiwi»Aa data encryption standard (DES) 
?yft n m is frequently, employe^. On the other hand, in 
public-key cryptosysteJ? an^encryption key and -^decryption key 



are different from each other. In <ghrg> public-key cryptosysten^ i4- i s c *>""*«i 
-f-o opt* the encryption key 4^ opened to the public, (BahA the decryption 



fyjthe decryption 

A key is kept secret. In general, such encryption methodSand 

A 

decryption" methodsare known. 

A 

An encryption method is disclosed in Japanese patent 
publication No. 60007/1990. According to the method, an 
encryption key is generated based on a data forming a file to be 
recorded on a recording medium. Information is encrypted by 
using the encryption key, and the encrypted information is 
recorded on the recording medium. The file is reproduced from 
the recording medium, and a decryption key is generated based on 
data forming the file. Then, the encrypted information is 
decrypted by using the generated decryption key. 

However, when such encryption <ifigtE5^ and decryption 
methodjjare emplbyed, the file used for generating the encryption 
key is recorded on one portion (sequent regions) of the 
recording medium, which may allow the file to be duplicated with 
comparative ease. 

SUMMARY OF THE INVENTION 
In view of^snrh aspoct, it is an object of the 
present invention to provide encryption method and apparatus, a 
recordxng method, and^ decryption method and apparatus which ? r oo\<*€, cofeofc*- 
all ows uLiuiiq i.ujjy i ^. i i hn ff ort . ffri on .t.ho ri nfin,r m a£jiin 
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-rorwrrfori rm 3 rnnnrHmg-nwai^nm, -inH^ a recording medium where 



©A 



information encrypted by the encrypting apparatus y?/|recorded . 

According to a first aspect of the present invention, 
when information to be recorded is encrypted by using an 
encryption key, (^encryption keyft based onyyinhmront information 
inherent in a recording medium jra-g enoratod ^ ^he information to 
be recorded on the recording medium is encrypted based on the 
encryption key. The inhere n t information inherent in the 
recording mediuiy ^ -a-er pe& > M^ , on a diete d o-f- ^V&~ 

According to a second aspect of the present 
invention , an encrypting apparatus for encrypting information to 
be recorded by using an encryption key includes a means for 
generating an encryption key based on < ^heren ^* inf ormation 
inherent in a recording medium, and a means for encrypting the 
information to be recorded on the recording medium based on the 
encryption key. The inhoront information inherent in the . 

recording TnoHinTn/ lir n rnnri f i^infp^ ^j n^Ti a rH cV.„ . +1*4* 

According to a third aspect of the present invention, 

when informati6n obtained by encrypting information to be 

recorded by using an encryption key is recorded on. a recording 

teAirtrt-tef accord^ -to 

medium, (S^Jencrypted information is rf> ^™vnAflr\n*t*A on an 

encryption key^ gonorafoH.hacoH rv^^n^^nr information inherent 

llfot* . ... 

in ©^recording medium. < Tho i^ sai^yeeh ^ ir r rypt^^ is 

r&rr>j-r\or\ nn„ ^ra/a ^aa^-ti^ ^ The iwhuiuiY'L information 

inherent in the recording medium/yu ^ a ^go^ - preozSGT***"* 

According to a fourth aspect of the present 
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invention, when ^i^encrypted information recorded on a recording 

medium is decrypted, there are reproduced f rom^jrJcording 

medium a first file storing information encrypted by -uciftgAan ^ 

encryption key generated basod on a ft random data to-fc^ inserted 

into ^predetermined ,portionSbf the encrypted information - t - o b e 

A 

yor'py-HoH nn a^rarnrHing mnHiu^ ^TiH a second file Storing data 

indicative of ^a predetermined portion of the random data ^to bo - 

inserted into ^r^Q.dato a anfljnGd porfaioiL-a ^ the encrypted 

information. The random data is detected from the encrypted 

information stored in the reproduced first file based on the 

data stored in the reproduced second file and indicaLimy Lhe 

pred e termined p er L i o n uf lihe random daba . A decryption key is 

generated from the detected random data. The encrypted 

information of the reproduced first file is decrypted by using 

the decryption key. 

According to a fifth aspect of the present invention, 

a decrypting apparatus for decrypting (ap^encrypted information 

recorded on a recording medium includes a means for reproducing 

from the recording medium a first file storing information 

act* rdiiQ <^^^&<*SLf&©4*~ 
encrypted -fey-msiag lan encryption key g^n^rfttMjj^nnri .nn n random 

data 4&~be A inserted into ©^predetermined portion5of the 

encrypted information^to he recorded nn a., recording raodium and a 

second file storing data indicative ofka prodotegminaA portion 

of the random data i^o-*€^inserted into a- prodotQirmin o d portion 

-e-#*the encrypted information, a means for detecting the random 

data from the encrypted information stored in the reproduced 

first file based on the data stored in the reproduced second 
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file n m l inil i rnl ing I Tip p' n -rlr'i i ninpfi Dnrfinn of th& ^anfloa- 

d^ta r a means for generating a decryption key from the detected 
random data, and a means for decrypting the encrypted 
information of the reproduced first file by using the decryption 
key. 

According to a sixth aspect of the present invention, 
a recording medium capable of - feo i ng used in doorypt'i » orr , n ] a ^ja 
decrypting apparatus includes a recorded signal capable of being 
decrypted by (^decrypting apparatus^ . The recorded signal 
includes a first file storing information encrypted by using an 
encryption key generated based o rr/grandom data-*eH^ inserted 
intoy$ predetermined portionJbf a^encrypted information. 

BRIEF DESCRIPTION OF THE DRAWINGS 
FIG. 1 is a block diagram showing an arrangement of.- 
an encrypting apparatus and a decrypting apparatus according to 
a first embodiment of the present invention; 

FIG. 2 is a diagram showing a logical file format 
according tOy(ISO9660 standard; 

FIG. ' 3 is a flowchart used to explain an encrypting 
operation of an encrypting apparatus according to the first 
embodiment of the present invention; 

FIG. 4 is a table showing an example of an 
arrangement of a digest method file; 

FIG. 5 is a diagram used to explain a mothod ef 

J . -iMt Sioni^wt 4V\<u diQett- <**Ain*d -fife ^W\e< 

producing a riisfc-fegesy ^ " 

FIG. 6 is a flowchart used to explain a decrypting 
operation of a decrypting apparatus according to the first 
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embodiment of the present invention; 

FIG. 7 is a block diagram showing an arrangement of 
an encrypting apparatus and a decrypting apparatus according to 
a second embodiment of the present invention; 

FIG, 8 is a flowchart used to explain an encrypting 
operation of an encrypting apparatus according to the second 
embodiment of the present invention; 

FIG. 9 is a flowchart used to* explain a decrypting 
operation of a decrypting apparatus according to the second 
embodiment of the present invention; 

FIG. 10 is a block diagram showing an arrangement of 
an encrypting apparatus and a decrypting apparatus according to 
a third embodiment of the present invention; 

FIG. 11 is a flowchart used to explain an encrypting 
operation of an encrypting apparatus according to the third 
embodiment of the present invention; 

FIG. 12 is a flowchart used to explain a decrypting 
operation of a decrypting apparatus according to the third 
embodiment of tvhe present invention; 

FIG. 13 is a diagram used to explain encrypting and 
decrypting methods employed by the encrypting and decrypting 
apparatus according to the third embodiment; 

FIG. 14 is a block diagram showing an arrangement of 
an encrypting apparatus and a decrypting apparatus according to 
a fourth embodiment of the present invention; and 

FIG. 15 is a cross-sectional view - showing a disk re,Loc&\(\^ ^Q^ufluff 
-having- an inherenL iiiluimabieMi rocordod on i 4?3 - otr - r -f a ocu . ^ accord a At ft 

6 \t\^^hof) 0 



DESCRIPTION OF THE PREFERRED EMBODIMENTS 
An embodiment of the present invention will 
hereinafter be described with reference to the accompanying 

drawings . /j Infnrmnt-innr nsP( ] -i ^ f , |iir> rnnhnHimnnf nrn video ^ " J 

information^^audio information^'text information^fand so on. 
In , j-h ii r ombodj^^nt^ ^^cording mrflirj^n T rrhirh pn^rypt.nri, ^ 
j- nforni a tion to bo docrypted^ s- jec l G3 ? d od--a- g g 7 ^ f or example, disk- 
like recording media such as digital video disks (DVD) , optical 
disks , magneto-optical disks, magnetic disks such as flexible 
disks or hard disks, and so on, and tape-like recording media 
such as magnetic tapes or the like. 

The^T recording TnoHi^nrn H^rn rnnn-rHing mnH -i a a , 

-l ag go numbci ' of which arc pgoducod by /\duplj-cation of a master 

disk, a master magnetic tape or the like, ^bi^ta flplain text) to 

be encrypted ^l/ydata^subjected to the scrambling, £fie shuf fling r OfsCl 
^ a. A 

(fcH© encoding aoe i apding (tgyfooving picture experts group (MPEG) 



system, tho encoding according Lo joint photographic experts 

group (JPEG) system and so on. In accordance with the data to 

be encrypted, data (Jplain text ]) decrypted from encrypted data ^^^7^^ 

iPpropnoAo Con ^jO — 

rhtn >t n he 1 ni|j|npiiiiirtiiiiii rinn de-scrambling, £heTde-shuf fling, (ffifz~~ #?\<T 

decoding according to the MPEG system, "feho -decoding - aooording to 

^tiie JPEG system and so on, 

FIG. 1 is a block diagram showing an arrangement of 

an encrypting apparatus and a decrypting apparatus according to 

the first embodiment of the present invention, by way of 

example . 

An encrypting apparatus 1 includes an in forma tiorr 
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q data generating unit 2 which is formed of a reproducing 
A ^ . — ^ — - " 

apparatus for reproducing (an information data (such as digital 
c(<rK ; J - 

videoyj inf ocma feAon , digital audio(Ain format iran or the like) from a 

recording^jbape and po-tan .. on . whioh the"i^oCT tatejr©R^d atea~ «jr s 
rftcnrrlfivi . , Tke data generating unit 2 outputs the reproduced 
laformat - ion data ^plain text) to an encrypting unit 3. The 



encrypting unit 3 encrypts the Cn^SEmaHoh data output from the 
Tnform^ti ^data generating unit 2 and outputs (3^"encrypted 
CTintormatigp data Cryptogram) to a recording unit 7 which will 
be described later on. 



The encrypting apparatus also includes an inherent . 

information generating unit 5,wJiie*yY 3ut P uts v infomation \A nnerent r 
in a recording mediunu to the rcoordiitg unit - 7 >, * ^t,h ptt1 rj a +-* A^sc^.^^^vviZ. 
for e/^^PJS^andom number datag) or tho liko i sTefapIoyed as the information vv^li l~ 

inherent m the recording medium^ — Sfe©/|randomydata is recorded "wzrta 
by the recording unit 7 on a. predetermined region of the 
recording medium such a s^f^Ilskjo r tho liko as a normal file as 
shown in FIG. 2. Indeed, since the random data isj^heypormal 
file, the random data can be copied. But, when this file is 
1 copied to the recording medium/ such as a hard disk or the like, 
as shown in FIG. 2, ^position (allocation) of this file is 

Changed, Which Pr o vont n- thn nnnim infnnn^inn +h^1- qf an. . 

n „. v *. dv^Wc«U. ****** : - 

ongiflal . c l i c k fr o m . bein g ubLaintj d. . n\ 

FIG, 2 is a diagram showing a logical file format £af\ f\Q*C \fe 
according to the IS09660 standard. As shown in FIG. 2, sectors 
0 to 149 are set as a pre gap area where data may or may not be 
recorded. Sectors 150 to 165 are set as a system area where /^Tj^P^ 

A 



copyright information is stored^- for example . Subsequent 
sectors 166 to n-1 (were n is ^ variable numbor - ^a mi-a ^tO 
prodQtormin ct* integer va±ne) are set as volume descriptors where 
management information® |frp^stored. 

The volume descriptors include a primary volume 
descriptor where a table of directories (path table) and so on 
are stored. Sector n and succeeding sectors are user-accessible 
areas where predetermined files are stored. Each of the sectors 
is formed of 2 kbytes, and an offset is used to indicate a 
position therein. 

As shown in FIG. 2, for example , the random data can 
be recorded as an interleaved file. Moreover, the random data 
can be recorded as a multi extent 'file. The interleaved file is 
a file of the random data recorded on a plurality of 
discontinuous portions in a predetermined area. The multi 
extent file is a file of the random data which are recorded on a 
plurality of discontinuous areas as one file. 

When the random data is recorded as the interleaved 
file or the mul'ti extent file, the random data can be recorded 10 
@ dispersed positions, which makes it more difficult to match 
the position of the random data recorded on the read-only disk 
with the position of the random data obtained by copying the 
random data from the read-only disk. 

Moreover , it is possible to recor d the random data^^i^ 
the P r e gag, area ^0 = 00 : 00 :00 to 00 : 00 : 02 : 00^ ) or on the system 
area (^^ 0j0 2 = 0 0^ 0^^0700702 HjTp according to the ISO9660 
standard. When the random data is recorded ^jj^ither of the 
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above areas, the recorded random data cannot be accessed as (QliT^ 

— A 

normal file f which makes it difficult to copy the random data. 



Moreover, it is possible to record the random data <6fy , 
an application area>j with its offcpf within thp rango from 881th 



-feybe 10 lJ9bLh'-4^fee- of the primary volume descriptor^ of the 
^^inf^ +n i-hn . Tfin n nrin n - nnrinn H -Sinco thia 

^ j^wup application area stores & header information; of tho files- 

according to thp T S nq^fiO , rt t ,^ndn ril Jvt>beyrandom datai^ecorded <6p //J-fij/ c 

area^cannot be accessed as fefee^normal file, which makes it 
difficult to copy tho random data ctorod thoroin . 

The random data is finally recorded on a master disk 
12 as shown in FIG. 1. 

The encrypting apparatus 1 includes a file forming 
unit 6 for forming a file J digest method file) indicative of a 

predetermined portion ofyl an encrypted information data^ 

. . More P«^6ala/f/i 3t*£*6e> SeoUr ^ Ws &"\cf/or o-fA^+i 



/I frnm a- pTftHa-hn-rminf^-.fry-ft 0 numhnr t i n rmrttuhf l T 

\ 4r ^A^Trais^--* n -M m La ^^^. f - r mrrr rii f f n r o hV ir fiirtnT 



EaadOffl- ddLd JLfcJlferdQd on t-hn Tn* a ±a.r rHe^V 17 wj-hh ftp-inr j ^ n. ^ - W l 

. In th^a b mwe ..eBe^g^d~^a^®oafta^A®a»«da^a<v Then, the file forming 
unit 6 forms a file (digest method file) formed of one or plural 
pairs of sector numbers and offsets (byte number in a sector). 
The file indicative of a predetermined portion of the 
^ ^ia£©«HiatiQn data (the digest method file) is inserted into (Sfp a 

predetermined areaftia-%fap pnrryptPd informat inn-ditn nnd fimlly 
- recorded on bho - master disk 12^ " -H*e^ CuCfyP+fd a+rctj 

The encrypting apparatus 1 includes the recording aj-^ff^ 

Abaft **#*O0 
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unit 7 for recording on a hard disk 8 the random data supplied 
from the inherent information generating unit 5, the digest 
method file supplied from the file forming unit 6, and the 
encrypted ±fii ormatlS^dat a supplied from the encrypting unit 3. 
The encrypting apparatus 1 includes a reproducing unit 9 formed 
of a magnetic head, an amplifier and so on. The reproducing 
unit 9 reads out the random data from the hard disk 8 based on 
the digest method file, recorded on the hard disk 8 and supplies 
the read random data to the encryption key generating unit 4. 
The reproducing unit 9 also reads out the encrypted C onformation 
data and supplies the encrypted> lnf ormatio p? data together with 
the random data and the digest method file to a formatting unit 
10. 

The formatting unit 10 formats the encrypted . 
- 9^ 

(^nfomatioia data and the digest method file supplied from the 
reproducing unit 9 to produce a pre-master image. The 
formatting unit 10 supplies the pre-master image to the 
recording unit 7. At this time, as described above, the 
formatting unitf 10 can format the random data as the normal file 
according to the ISO9660 standard, and, as described above, can 
format the data as the interleaved file or the multi extent 
file. The recording unit 7 records the pre-master image on the 
hard disk 8. The encrypting apparatus 1 includes a recording 
unit 11 formed of an optical head, an amplifier and so on. The 
recording unit 11 records the pre-master image reproduced from 
the hard disk 8 by the reproducing unit 9 on the master disk 12. 
A disk producing apparatus 13 employs the master disk 12 as an 
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original disk to reproduce a large number <Q)jj!lisks 15 (slave 
disks). 

A decrypting apparatus 14 includes a reproducing unit 
16, a decrypting unit 17, a decryption-key generating unit 18, 
and an output terminal 19. The reproducing unit 16 reproduces 
the disk 15. The decryption-key generating unit 18 generates a 
decryption key based on a reproduced signal supplied from the 
reproducing unit 16, and outputs the decryption key to the 
decrypting unit 17 which will be described later on. The 
decrypting unit 17 decrypts the reproduced signal supplied from 
the reproducing unit 16 based on the decryption key supplied 
from the decryption-key generating unit 18. 

An encrypting operation of the encrypting apparatus 1 
will be described with reference to FIG. 3 which is a flowchart 
therefor. In step SI, initially, the inherent information 
generating unit 5 generates the random data (random-number data) 
which isy^a ^aluo (encryption koy) - in herent in^fifrecording medium fatrypt** 
and supplies the random data to the recording unit 7. In this 
step, the file 'forming unit 6 determines from which arecfi^f the 
master disk 12 the random data (random-number data) usedftfor the 
-va Jnp (Qnrrypt an n V .o y ) inherent in the recording mediuir^is r U 
extracted, and then produceSa file (digest method file) 
indicative rvS.nn o nr-a plurality o^Setermined are^\ 

As shown in FIG- 4, for example, the digest method 
file is formed of a table including a large number of offsets 
(offset numbers) of n sectors from the sector number 1 to the 
sector number n (where n is fclii^number of about several tens). 
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As shown in FIG. 5, the table designates data^from a, X - : a. r /)0t id>£fsehf 

^redetermi ned-oj£&et in- a-g-eefe or of the bBLrtui iimHb cr- i- %€> '^vH**^ . 

another prp.riptpnryi np.d ^ f j£ ^ ^^ data from a ^?°"*^ 

prftdfft ,a £ fflii i ft( 1 M Q .f fsRf ,, in a . sprtor of tho sector number . 3 ^to 

a^feheir-pred^ The digest method file is 

recorded by the recording unit 7 on the hard disk 8. The random 

data is also recorded by the recording unit 7 on the hard disk 

8. 1 

The processing proceeds to step S2. The reproducing 

unit 9 reproduces the random data/\^^the digest method file, 

which is determined in step SI and recorded on the hard disk 8, 
b^rt+rTfcvV\£ ^ e JkU_ spe<u£t«Ld W*f sector c^W^a^a offefct^ Co^-fai^^ |rN 

/) fe o m the prodotorminGd - of f ac i i - in . -bh a^sp^ py, p f fho-c^fnr numh or 

-fV^, Avg&sA N\«^o4 4ile.jp 

/\ A ^ ar>rVh h ?T; pr p< i°t Q j7TTV l i.n e d sector- tho r r i - n-im t j - fr om. the 
joradetei^MB to 

^m ' M i yj.. ^s ^ fe L^iitdme t ^ - ulf L ^Llifc!j?e»i s^ The reproducing unit 9 
then gathers the reproduced random data. The reproducing 
apparatus 9 supplies these gathered random data to the 
encryption-key. generating unit 4 . 

In step S3, the encryption-key generating unit 4 
subjects the random data supplied from the reproducing unit 9 to 
a predetermined calculation (e.g., addition) or generates the 
encryption key (inherent value, disk digest) from the random 
data itself as shown* in FIG. 5. Then, the processing proceeds 
to step S4- In step S4, the encryption-key generating unit 4 
supplies the generated encryption key to the encrypting unit 3. 
The encrypting unit 3 encrypts the ^nformatl^fi data supplied 



from the iSformatiog data generating unit 2 based on the 



13 



supplied encryption key. The encrypting unit 3 supplies the 
encrypted < ^nforii iatj^^data to the recording unit 7. Then, the 
recording unit 7 records the encrypted itjJorTnatj^> data on the 
hard disk 8. 



Then, the processing proceeds to step S5. the_ 



reproducing unit 9 reproduces th^ encrypted yinformatioiy data, 
the random data which is(^o^^^the information inherent in the 
recording medium, and the digest method file indicative of the 
predetermined portion of the jfencry grt e d "iji f ormat ion} data^iiieh 
•ace recorded on the hard disk 8, and supplies them to the 
formatting unit 10. The formatting unit loy^generates the P 1 ^^ 
master image (format signal) from the encrypted informatio n^) 
data, the random data which is to be -tfrte-i ^^^ 

OiQ_rprnrHing Ttiodi^ and the digest file method file indicativ e 
&£ ill re r pi edetm " in±H£fct "' po i?feb^~Q^t & e~^^ 

a]1 pf ±b^^^ y ^^f>wppn . i oH frnm thn Tnprnrinn i n g nm> a At this 

time, as described above, the formatting unit 10 formats the 

or a* 

random data as ^hej^iormal file according to the ISO9660 
standard. Moreover, the formatting unit 10 can format the 
random data as (t^^Lnterleaved file or ^h^multi extent file to 
be dispersed. 

The formatting unit 10 supplies the produced pre- 
master image to the recording unit 7. The recording unit 7 
temporarily records the pre-master image on the hard disk 8. 
The reproducing unit 9 reproduces the pre-master image recorded 
on the hard disk 8 and supplies the reproduced data to the 
recording unit 11. The recording unit 11 records the reproduced 
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data supplied from the reproducing unit 9 on the master disk 12. 
Alternatively, the formatting unit 10 can supply the pre-master 
image, i.e., the formatting signal directly to the recording 
unit 11 which records the pre-master image on the master disk 
12. 

The disk producing apparatus 13 employs the master 
disk thus produced as an original disk to reproduce a large 
number of the disks (slave disks such as a DVD, an optical disk, 
a magneto-optical disk, or the like) 15. When the magnetic tape 
is* employed as the recording medium, a transfer apparatus may be 
employed to transfer signals recorded on (€f^master magnetic 
tape to a large number of slave magnetic tapes. 

A decrypting operation of the decrypting apparatus 14 
will be described with reference to FIG. 6 which is a flowchart 
therefor. In step Sll, the reproducing unit 16 reproduces the 
signals recorded on the disk 15. The reproducing unit 16 
supplies the reproduced signal to the decrypting unit 17 and, 
when the decryption-key generating unit 18 supplies a gate 
signal to the feproducing unit 16, also supplies a file of the 
recorded signal where the random data is stored and the digest 
method file to the decryption-key generating unit 18. 

The processing proceeds to step S12. In step S12, 
the decryption-key generating unit 18 extracts from the random 
data supplied from the reproducing unit 16 the random data 
designated by the digest method file^^r ^ tho random data from 
^ ho pr o d r' tcrmincd o tfsetr-to-ai ^ hor. 

- sector of tho sc e Lui aumb^-fr- an-d t to M r Aiid Qm, ^a Jia,^QiiLthP 
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^secto-r^o f- -t he eet€^wamfee3~-2^ 

Then, the processing proceeds to step S13. In step 
S13, the decryption-key generating unit 18 generates the 
decryption key corresponding to the original encryption key from 
the random data gathered in step S12 and subjected to the 
predetermined calculation (e.g., addition)^ or from the random 
data itself. The decryption-key generating unit 18 supplies the 
generated decryption key to the decrypting unit 17. Then, the 
processing proceeds to step S14. In step S14, the decrypting 
unit 17 decrypts the reproduced data supplied from the 
reproducing unit 16, i.e., the encrypted informatio n data 
(cryptogram) based on the decryption key supplied from the 
decryption-key generating unit 18, thus obtaining the original 
Uin ^rmation^ iata (forain text)y^ The decrypting unit 18 outputs 
the original^^fomat^i data through the output terminal 19. 

If the encrypting apparatus 1 records pit strings of 
the recording signal on the track of the master disk 12 in a 
wobbled fashion, then the inherent information generating unit 5 
may generat€*^a* wobbling signal indicative of the wobbling of 
the pit strings of the recording signal to be recorded on the 
master disk 12 as the information signal inherent in the 
recording medium 12. If the information inherent in the disk 15 
as the recording medium is a physical information to be formed 
on the disk 15 and a track on which the recording signal of the 
master disk 12 is to be recorded is a wobbled pregroove or a 
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wobbled land portion, the wobbling signal corresponding to the 
pregroove or the land portion may be generated as the 
information signal inherent in the recording medium from the 
inherent information generating unit 5. 

The encryption-key generating unit 4 generates an 
encryption key based on the wobbling signal and supplies the 
generated encryption key to the encrypting unit 3. The 
encrypting unit 3 encrypts thet inf ormatio^ ) data supplied from 
the information data generating unit 2 based on the encryption 
key supplied from the encryption-key generating unit 4. 

In this case, the decrypting apparatus 14 is operated 
as follows. Specifically, the decryption-key generating unit 18 
detects a wobbling frequency of the pregroove or the land 
portion corresponding to the predetermined portion of the 
recording signal on the disk 15. The decryption-key generating 
unit 18 generates the decryption key obtained by subjecting the 
data corresponding to the wobbling frequency to a predetermined 
calculation or generates the decryption key corresponding to the 
original encryption key based on the data itself corresponding 
to the wobbling frequency. The decryption-key generating unit 
18 supplies the generated decryption key to the decrypting unit 
17. The decrypting unit 17 decrypts the encrypted information 
data (cryptogram) supplied from the reproducing unit 16 by using 
the decryption key supplied from the decryption-key generating 
unit 18, to obtain the original information data (plain text). 

As described above, if the information inherent in 
the recording medium is the physical information to be recorded 
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on the recording medium, e.g., the wobbled pregroove or the 
wobbled land portion of the recording medium, then the recording 
medium may be a disk having a considerable thickness and a 
comparatively rigid substrate, such as a DVD, an optical disk, a 
magneto-optical disk, a hard disk or the like. 

When (th^random data is employed as the information 
inherent in the recording medium and the position where the 
random data is recorded is managed by the digest method file as 
described above, it-4s possible, to of feetr-fcfee- effective copy 



Since (Efi^riormal file according to the ISO9660 
standard is employed, ^a nd when Lhe file M '- duplioa-tod ' HsoMrfiG 

r&nnrdJjr i r] mnd±u.m 1 — -b.fr q f , j 1 , r >,„ j c* .x pr ^rrt^4~V fl n rl i f f ^T ^V & po f Ti i t i i 

-e£--iJia /recording medium,yit is impossible to/^Q btain-fcho c ame ~f { \£^ |$ 
js a x qgmat i on- - as t hat - ojj ■■■ fah o ^s^ ^ j^ a- l . ■■ do.^e k . gheiuluiu, iL -11 ^ 0 

'TP^^iblr t.n nff^rt f.hf nior o pff Qr,4 *v ri P ^npy p^nti? ^t on the 

^ inluiiuaLiui w 

FIG. 7 is a block diagram showing an arrangement of 
an encrypting apparatus and a decrypting apparatus, to which the 
encrypting and decrypting method according to the present 
invention is applied, according to a second embodiment of the 
present invention. An encrypting apparatus 1 shown in FIG. 7 
has a random file forming unit 20 instead of the inherent 
information generating unit 5 of the encrypting apparatus 1 
shown in FIG. 1 and also has a file forming unit 21 for forming 
a file indicative of a predetermined portion of the random file 
instead of the file forming unit 6 for forming a file indicative 
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of the predetermined portion of the encrypted information. 
Other arrangements and operations of the encrypting and 
decrypting apparatus 1 and 14 shown in FIG. 7 are similar to 
those of the encrypting and decrypting apparatus 1, 14 shown in 
FIG. 1 and hence will not be described. 

An operation of the encrypting apparatus 1 shown in 
FIG. 7 will be described with reference to FIG. 8 which is a 
flowchart therefor. The random file forming unit 20 includes a 
pseudo random data generator for generating a random data. In 
step S21, the random file forming unit 20 produces a random file 
including (a) random data of, for example, several kbytes or 
larger generated by the pseudo random data generator. The 
random file forming unit 20 supplies the random file, for 
example, to the recording unit 7. The recording unit 7 records 
the random file on the hard disk 8. 

Then, the processing proceeds to step S22. In step 

S22, the file forming unit 21 determines from which portions of 

the random file random- number data (random data) used for 

obtaining an inherent value (encryption key) is gathered, i.e., 

determines from which portions) of the random data the random. / 
/S|)*^m^l4 (e-$ fc*Je,4cr*M*t4 letter/ 

data^from a predetermined^ f set numb er to anothe^Aof f set ^timber ' 

or th e ran d om data formed -of /I a plurality of predetermined 1 Ocn-^«^ ace/ 

portions/f ie gathered ^. The file 'forming unit 21 forms a digest 

method file indicative of the .p£e dotormim?d - portions) of the^f* 

random data and supplies the digest method file to the recording 

unit 7. The recording unit 7 once records the digest method 

file on the hard disk 8. Finally, the reproducing unit 9 reads 
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out the recorded digest method file from the hard disk 8 and 
supplies the reproduced digest method file to the recording unit 
11, and the recording unit 11 records the digest method file on 
the master disk 12. 

Then, the processing proceeds to step S23. In step 

^product ^ 

523, the reproducing unit 9 gathorsA the random data, recorded on 
the hard disk &y e- f the one 'p reilB L e r mine d p or b i o ii ■f r e%^fefea^ 
pged ^ o m ii re 4~Q^£6^fe~^ 

^ rirlrlr^sfi or tho r anti e m™^ ^ ft^.fosp^^ 

^tH?a±±t^^ The 
reproducing unit 9 supplies the reproduced random data to the 
encryption-key generating unit 4. The encryption-key generating 
unit 4 generates the encryption key (inherent value) (disk 
digest) from the random data itself or the random data subjected 
to the predetermined calculation. 

Then, the processing proceeds to step S24. In step 

524, the position where the random file is allocated in the 
master disk 12 is calculated, i.e., t h o r o- i ra-o al o u 1 afee d an 

offset value /\( off qpt -nnmh n r) o f a pre ^ eLermincd -nnnto.Tr nn mh nr J^g^ *ve#0cl 
Qijtaijiad^hen^he^ 

in formation (te ±^jxxzricu^^ thp .ha,rd-H44q4MHfmd-^^ 

^xi b hp Tnastp^^ . fAA i sk ' ^ 2^ Th e i ca ^c^> 3» afc e d'~€^ ^ 

' file - . Thus, the digest method file is modified. 

Then, the processing proceeds to step S25. In step 

525, the encryption-key generating unit 4 supplies the generated 
encryption key (the inherent value) (disk digest) to the 



20 



encrypting unit 3. The encrypting unit 3 encrypts the 
<ln£ormati^^data supplied from the information data generating 
unit 2 and supplies the encrypted information data to the 
recording unit 7. The recording unit 7 records the encrypted 



4nfonnatiop data on the hard disk 8. 

Then, the processing proceeds to step S26. In step 
S26, the reproducing unit 9 reproduces the encrypted ^Eo^^tJgS 5 ^*^ 
data, the signal indicative of the information inherent in the 
recording medium, and the digest method file indicative of L he 
^P^edet^soine d - en o ryp- be d po^i - e ^r^em.^^ and 
supplies them to the formatting unit 10. The formatting unit 10 
formats the information data, the information signal and the 
digest method file to produce the pre-master image. In this 
formatting operation, as described above, the formatting. unit 10 
can format the random file as (tn^/vLnterleaved file or <Qi£^multi 
extent file iror-d icporcG the random - -file to bh e diftlmgn t 
' positions^ 

The formatting unit 10 supplies the pre-master image 
to the recording unit 7^/|^he recording unit 7 -ence- records the 
pre-master image on the hard disk 8. The reproducing unit 9 
reproduces the pre-master image recorded on the hard disk 8 and 
supplies the reproduced pre-master image to the recording unit 
11- The recording unit 11 records on the master disk 12^the . 
pre-master image supplied from the reproducing unit 9 or the 
pre-master image supplied directly from the formatting unit 10. 

The disk producing apparatus 13 -©fflpiey^the master 
disk 12 as (th^y)original disk^n nfitain a large number of (the? 
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disks (slave disks) 15 (g^^uplidktion- of th o mactor dijk 12 ". 

A decrypting operation of the decrypting apparatus 14 
shown in FIG- 7 will be described with reference to FIG. 9 which 
is a flowchart therefor. In step S31, the reproducing unit 16 
reproduces the disk 15 and supplies the reproduced data to the 
decryption- key generating unit 18. Then,, the pirooGDcimj, 
procpprte- Lu bCup G33w ^n step S32, the decryption-key 



generating unit 18 extracts from the reproduced eQcryptec 



^nformat^^ data the random data, designated by the digest 
method filc^^o f a p ^ t ir-iruJ Lro n i *-hP.. p:rj ad i^ P. T T ^ ^ 
"raao&hei^^irj&de&Q*:^^ 
-gectOi' xlUlllDfet-L- dlia^f-asretliQ;^^ 

-o££s et Lu e^^thor-pj^jdai^exmij^ed o ff se rf: — TfteHgeci y p r tOnHeey 
'"T^ gn a gatiwj LliiiL qQttte^s^hein . 

Then, -the processing proceeds to step S33. In step 
S33, the decrypt ion- key generating unit 18 generates the 
decryption key obtained by subjecting the random data to^^T^ 
predetermined calculation^or the decryption key corresponding to 
the original encryption key based on the random data itself, and 




^hen/supplies the generated decryption key to the decrypting 
unit 17. . Then, ^fcheL_p£oe essi ' iiy piuuacc t s L ' o iirLep 33 4^ in step 
S34, the decrypting unit 17 decrypts the encrypted^nf ormation 




data (cryptogram) supplied from the reproducing unit 16 by using 
the decryption key supplied -g-™™ j-j, n ^^^^ ^^^^y nnrrli^rl 
from the decryption-key generating unit 18 to obtain the 
original j^nfor matiop data (4>lain text). The decrypting unit 17 
outputs the original (^nformatTiorndata through the output 
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terminal 19. 

FIG. 10 is a block diagram Rowing arrangcmontio » of an 
encrypting apparatus and a decrypting apparatus according to a 
third embodiment of the present invention, ^^^^rrangement of 
the encrypting apparatus 1 shown in FIG. 10 is basically similar 
to the encrypting apparatus shown in FIG. 1 and hence will not 
be described. 

An encryption method employed by the encrypting 

apparatus 1 shown in FIG. 10 will be described with reference to 

FIG. 11 which is a flowchart therefor. In step S41, a 

distribution key (distribution-key data) to be distributed to a 

user is ^ EToperly ^-determined^ and^registered in a memory (e.g., a 

4 

semiconductor memory) in the encrypt ion- key generating unit 4. 
The distribution key may be registered in a central processing 
unit (CPU) (which may include the memory) instead of the memory. 

Then, the processing proceeds to step S42. In step 

Its ft<vi\&r )<tr +6 -tWf 

S42 f j^ s-imilar l y to th e^ pr . ocffAsi ^ ug -. ^ escribed^atee^e with reference 
to the flowchart of FIG. 3, the encryption-key generating unit 4 
gathers the informatior^inherent in the disk 15 and subjects 
the in format ion^to a predetermined calculation to generate <€jjif^ 
disk digest (key). < ^^eft 7 ^he^£^ ^cing proge^ds t6 St£fl 3 ^3^ 
In step S43, the encryption-key generating unit 4 subjects the 
distribution key determined in step S41 and the disk digest 
generated in step S42 to a predetermined calculation, e.g., 
exclusive-ORs the distribution key and the disk digest and sets 
the calculated result as a work key. 

The processing proceeds to step S44. In step S44, 
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the encryption-key generating unit 4 supplies the work key 
obtained through the calculation in step S43 to the encrypting 
unit 3 as the encryption key. The encrypting unit 3 encrypts 
the (Tnformation)data based on the encryption key and supplies 




the encrypted^^forjja^xQ^ data to the recording unit 7. The 
recording unit 7 records the encrypted ^±Sformff^iah data on the 
hard disk 8. 

The decrypting apparatus 14 shown in FIG. 10 has a' 

key reading unit 22 and a key medium 2 3 j i*ew±yj provided in 

A A 

addition to those of the decrypting apparatus 14 shown in FIG. 

1. The key medium 23 is arranged such that the above-mentioned 

distribution key can be distributed. For example, the 

distribution key may be printed on some suitable object in the 

form of Arabic numerals , symbols, bar codes, other codes similar 

to the bar codej^or the like. The key medium 23 can beyy foritiGd J 

•&£ a card or the disk 15 itself. 

The key medium 23 may include^a^memory, such as a 

semiconductor memory or the like/storing the distribution key } 

ori\a CPU or the 1 ike* x s m Ife d in g . .. t hey tmemor y . The key medium 23^w*oWk 

<V <U A, 

inc luding Lhe/ \memory or (Cne) CPU may be formod o t a card (e.g., / 

an integrated circuit (IC) card) or the like -^ ^Jhe key 7 medium 23 

may be arranged such that the distribution key is recorded 

thereon magnetically or optically. r&UGJy\key medium(23Ti^-^o/|be 

sold on a - mar Jca^s-etejby jpr together with a reproducing apparatus 

for reproducing the disk 15. The key reading unit 22 reads out 

the distribution key printed on or recorded on the key medium 

23. 
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A decrypting operation of the decrypting apparatus 14 

shown in FIG. 10 will be described with reference to FIG- 12 

which is a flowchart therefor. In step S51, the key reading 

unit 22 reads out the distribution key printed on or recorded, on 

the key medium 23 and supplies the distribution key to the 

decryption-key generating unit 18. Then, the processing 

\ n <x ^aMe^r S^i/ar* -fa^fWf 
proceeds to step S52. In step S52 ,y| similarly to tho processing 

docryptio iUB£QQ&& cing described with reference to FIG. 6, the 

decryption-key generating unit 18 gathers the informatiortff^ 

inherent in the disk 15 and subjects the information^to a 

predetermined calculation, thereby obtaining the disk digest 

(key) corresponding to the original disk digest (key). ■ 

Then, the processing proceeds to step S53. In step 

S53, the decryption-key generating unit 18 subjects the 

distribution key -obtained in step S51 and the disk digest 

obtained in step S52 to a predetermined calculation, e.g., 

exclusive-ORs the distribution key and the disk digest, thereby 

obtaining the work key. / 5 1 bei^ — h " h *^"T rrTT "'^^ pr-n^nn*^. -hq <=+Qp_ 

-»5*v In step S54, the decryption-key generating unit 18 

supplies the work key obtained in step S53 .a s— tho docryptecun k^y 

4o^^se«-»Vsfc A£t-ry{H\oA Key 
to the decrypting unit 11^ The decryptin^^^/17 decrypts the 

encrypted ^formatj^ data supplied from the reproducing unit 16 

by using the decryption key supplied from the decryption-key 

generating unit 18 and then outputs the decrypted fl ^ormatj j 

data through the output terminal 19. 

FIG. 13 is a diagram used to explain the encryption 

method and the^de^c^iptJ.oa method respectively employed in the 
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encrypting apparatus 1 and the decrypting apparatus 14 shown in 
FIG. 10, ^^Speej Lf ically y the/jplain text} is encrypted based on the 
distribution key and the disk digest , and the/^cryptogiram 
, ^kfea«*ed"'''fe^ ■ Lita L is recorded on the 

disk. The distribution key is supplied to a user through a 

route other than the disk. The cryptogram read out from the 

a. fee? : 'S dl tr^^d • by + 

disk is decrypted based on^bhe disk digest - obtained by - * 



calcul at i ron of - fc fee^distribution key aBd- th e data read out f rom 
prede^g mi - nod one or ^]^Lu<gajr-a^a^ 
docrypt-ed pl - a r ill L^aL ia ULTCp rrt^ 

FIG. 14 is a block diagram showing an encrypting 
apparatus and a decrypting apparatus according to a fourth 
embodiment of the present invention. 

An encrypting apparatus 1 shown in FIG. 14 has a 
random file forming unit 20 and a (^ando^ file forming unit 21 
for forming a file indicative of a predetermined portion of the . 
random fileyboth similar to those shown in FIG. 7 d ai s- t o ad of a the 
inherent information generating unit 5 and the file forming unit 



6 of the encrypting apparatus 1 shown in FIG. 10. The random 
file forming unit 20 and the file forming unit 21 are operated 
. baaiflfll 1 y sJLmilariy - L-g -' Lhose ^described with reference to FIG. 7 j 
-aaid^otner units* are a! s-o- operated b ri ni^Hy n imi 1 nrl y -tn- t hr 
ihose^described with reference to FIG. Iff. Therefore, the 
operations of the encrypting apparatus 1 and the decrypting 



apparatus 14 shown in FIG. 14 will not be described. The 
encrypting apparatus 1 and the decrypting apparatus 14^kaatift§ 
g-t»Qh-nrrnnrpmP[]tQ can carry out the operations of encrypting -fct» 
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di q 4a 4 erf-J 

plain tflsfrfc^and decrypting thejycryptogam by rnr?jri-ptir>n 

woJE- Afao - p^i-i>-to$et by the method shown in FIG. 13. 

-Even if any / br the encrypting apparatus l/\a^Gording_ -/Suj4^. ' 

. &rbdd(«ty^ 

-to^fefeeHE±rs < fa-%e~£o urth embod iments is ^m ft£ gyod t6-Kaa£sth e > 

infnrmatinn riaf-.a (fvl^) f ro m 1 - hr prrfintnrTT I i I'H M 1 I I 'I 'I 1 j | uj | noH-j 11T ^ 

( the diok — 15 ' ~ia »~ %&^ 

data on ann*-* 101 " p^ Q ^ Q + QT TT)in Q d T^drin* , *h^n it is impossible to 
obtain the s a mo data as recorded on tAo ^original recording ^ 
ty»ari-ii im frpm^nnt-hpr recording medium^ because they^ inf ormatio n ^^j^ 
data -v>Riia11 y rnnord^d o n a „nnth p r rr ono rdi ng mnd.i.nm nt ■■■t, h r__, d- 0 ^ 7 ^ J ^ 4L 

■xo gordod on the original recording medium. Therefore, it is 

impossible to decrypt rtfne) encrypted <ri3vtormatiorp data! 

. rtoreo^ _ _ - ^ ^ _ ^ fl Jt^dMti 

- Altornativol^j , even if ^ ne~iniormatiof^ data recorded ^n^nrthrr 

recording medium- can be decrypted, it is impossible to output 

the decrypted Cinformatio^ data through the output terminal as 

use 

the digital signals. As a result, eaap l - oynien l^/|of the encr ypti ng 
apparatus and methoc^ makes it difficult to copy ^he* information^) ( 
data^to another recording medium. 

-«Siac^the random file is arranged as (£K^i interleaved 
file or (the) multi extent file and h o nco - ro e €Kcded - on th e 



■■■ dPsrTT . i . hpd ahQ^p , - j t bee om e c /y more difficult to match the 
position^) of the random data recorded on the Aroad on j by disk with 
the positions of the random ^^^^pr^ — thr tnM disk -f^errT 
tbe-iLMd- unly dibk% Therefore, the illegitimate dubbing ((f^ 

-ropyi nr>)- can b^snrpronn^fi 



27 



In each of the first to fourth embodiments, as shown 
in FIG. 15, the information inherent in the disk 15 can be 
recorded by ultraviolet laser or the like on a disk surface, 
i.e., a surface of the disk substrate 33. 

When the information inherent in the disk which is 
recorded on the surface of the disk substrate 33 is read out, 

directed 

rays of light must be < eondensed ^n>fthe surface of the disk 
substrate 33 by moving an optical head (not shown) in the 
direction perpendicular to the disk surface ,and further a 
special reading apparatus and a special reading command (e.g., a 
command to move the optical head in the direction perpendicular 
to the disk surface) are required. Therefore, it becomes 
difficult to read the information thus recorded, and it becomes 
impossible to easily copy such information. 

This arrangement -ca-n also be-ief fective in protecting 
the, information from ^n) optical^ o a py -orA^so-called "peel and 
copy ft ^ gbeyj' peel and copy "^ie— tee physicallyyjcopy^pits 32 formed 
on the disk substrate 33 after a protective film 31 is peeled 
^?0from the disk substrate 33. S pocif ioally / ■ t ho- inf oanat io n 

Op+ttaA ^**iras on-h h^ -- i4 i ^ V ■ ! U iu i i nmrinH nr p-r-in+nH on |j q 

Tl ' A 4 SttbatTTThft- l.T f 1* n h n^cihlo -f-n pr^nnf -t-ho i nfnrmaf j on , jnhPr^H 4 !- 

rraAvotWij in the disk from tho "pool and copy" and Lho - optical oopy-in - 
o-f-4V\^ wto<s. h m^r , uj l ly hL aiX r rtlJLcR]l r ai^!Q un bhe pi-bo .. T3 o£ tho riitrlr 
^jUlJutd^ 1 11 70 ^ 7 "^^^ ^ i in^ , ft ir ,rnpy nj ^r nTTTrr M m m In il .in -| 1 n — f i I' l l l I V ' / 'I 

ar<wyr£^ T he apparatus and methods according to the first to 

bAiiT^ fourth embodiments of the present invention can beyj utiliscd f o r - 
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communication; such as/|wire communication (e.g., communication 
through an electric cable, an optical fiber cable or the like), 
wireless communication (communication utilizing electric waves, 
light, sound waves or the like), or the like. In ^this caoc , the 
encrypting apparatus 1 supplies the cryptogram to the decrypting 
apparatus 14 through the wire communication or the wireless 
communication. 

While the file is formatted in accordance with the 
ISO9660 standard in the first to fourth embodimenl^, the present 
invention is not limited thereto. While the work key is 
generated by j) go. 1 o uca fciag the distribution key and the disk 
digest in the f - irot -feo - fourth ombo diluent , the present invention 
is not limited ^thereto. " The work key may be generated^ by 
^alcyla^ distribution key and the wobbling signal. 

According to the encrypting apparatus and method of 
the present invention, since the information inherent in the 
recording medium <£|[\ set as the frequency of -jQp predetermined 



portioi^of the wobbled pregroove or <^h€^ wobbled land -p o*= L i o ii Lu ' 
btd fluiuod o n - b ho rooording . medium , it is possible to/\ offe:cL Lhu 
strong cop^j pgotocfc on^ |bfre information. 

According to the encrypting apparatus and method of 
the present invention, since the information inherent in the 
recording medium £$/fset as £h<| random data to be inserted into 
the* predetermined portior^Df the encrypted information to be ^ fa fjtt 



recorded on the recording medium, -dispef«xm--e#^they|ran^ 
j ^sert . ion pn^itiono can ma Jc^|it difficult to read the random 



\ Qata t , ilnf1 H i' | T . T.. fn^nffnn^ Ihn c+-^ nn g pgpy prntnnt- nn fchr- 

a' 
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According to the encrypting method of the present 
invention, sinceA t h o . third onorypfcion key generated f rom 
/| firofc key C generated from the information inherent in the 

recording medium; and^ tho c ooond key (independent of the^ f ii - at key)^ 
and the information to be recorded on the recording medium is 1 
encrypted by using the^febisd key,yj it io poooible Lo 3implify L he m^or^*ctio^ 
arrringpTnpnt„.mf^fchp pncrypfring ■ oppa^te-Qg-^rntr^f^Ji s" 'po'ssilfl^rt'o ^ ?ro\/,cteJ t 

- t 

.of - foct the ctrong copy pro-beet . .on ■ tho in - fegfRgfli i oir:^ 

According to the decrypting apparatus and method of 
the present invention, the encryption key is generated based on 
the random data <£o inserted into £fiaT predetermined portior^&f 
the encrypted in format ion (to biJ recorded on the recording 
medium. By using the encryption key, <£ffy| first file an^<£5ir 
second file are -a raspootivoly reproduced from the -*±a*slrreile 
whe«ge~irfre^eac^y^^ and the recording 

medium whnrn thn ffPnnnH -P-Mo -in ^j r h -hhoT-o -i g jl 7^ l < n , r ll .,i ur^ i,.1 i «1mi . ^jji -ha 

i R d,i,c 7 ^i-n v o o f thQ^p aaedjat^EH^^ 

i ns e rted i nt o t^ eu p^dot o rmin etfr-p^ ^ . i j i 

information. - Ba s e d the data stored in the reproduced second J^d^Q^ 
file and indioating^ prelfeermined portion^f the random data, • 
trfee-^audom dtrta i s d e tected f rom t ho n nnr yp± j ad-_lnf Qr^^ti nn 
otorod in the first fil^- The decryption key is generated from 
the detected random datyL l^he encrypted ^ffformat ioH) of the 
reproduced first file is decrypted (fusing the decryption key. 
-gb crGfore T i t is pocsiblo to d eGj-yp4~ 
by Lh e n trong copy pro - tc 
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According to the decrypting method of the present 
invention, the encryption key (^generated -base d on the^wobbling 
frequency of ($x^ predetermined portion£)>f the encrypted 
information to be recorded on the recording medium. By using 
the encryption key, (tf^^irst file and (El^second file are 
,£espeGt±vely reproduced from the fiin^h QrP th e p n ^^p fQ/ ^ 

^iirftffi^ recording medium where the , sqcqr4 

file^iji^whi^h-^ 

eo£J3gifce4~iR£©j£m^ 

Based on the data stored in the reproduced second file and 
indicating a predetermined portion of the encrypted information, 
the wobbling frequency of the predetermined portion of the 
encrypted information is detected. The decryption key is 
generated based on the detected wobbling f requency^^jfche 
encrypted information of the reproduced first f if^ is decrypted 



encryj 
<6p usi 



using the decryption key. J horoforo, it io poooiblo t o 

-dtJ ij. y pia thQ ... 4iJ a. forirKrt?ion - pyofrn^fon ri h y-d-hn rtrnng ^Opyj^TX^ Pf ^ 

According to the decrypting method of the present 
invention, the encryption key £^generated based on the 
frequency of ^^^ redeterm i n ^d portio$"i)f the wobbled pregroove 



or %h$} wobbled land portion to be formed on the recording 
medium. By using the encryption key, ^^^first file and @^T^ 
second file are i:pspnrt wnl y reproduced from t hp fiirnt. f,ii1,n> 

medium/wfeese* the second f ile^^S^efe^ho-ro- i o .■■■ rQco r de d^re data 
indicative of ^^"predetermined portior^bf the wobbled pregroove 
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oM^r (tl^wobble land portion to be formed on the recording medium. 

^\ Based on the data stored in the reproduced second file and 

xiidju ' ii LllHJ l J luUl | Lu cBLLnoa»- ' p u.L Lifcte4UuI Ulu=! wob fa l - ed ' pmyiuuve Lli e 
wobbled . land pogteiofl , the wobbling frequency of the 
predetermined portio^bf the pregroove or ^fh^land portion 
£ormPri nn . fho rooor - d - ing modjum is detected. The decryption key 
is generated based on the detected wobbling frequency^rVhe 
encrypted information of the reproduced first file is decrypted 
by using the decryption key. Thorofnrp jf p r mibli LET * 
i flaasypt -teh e ir if o iumafed^i^p r- ofce®^ 

According to the decrypting method of the present 
invention, the encryption key is generated based on -^H^random 
data selected from (t^ predetermined portions) of /Jttae random file 
formed of (^Beprandom data generated by *• hp f-niilci i_ e Liuimd^ pseudo 
random data generator. The' file storing the information 
encrypted by using the encryption key, the file storing the data 

indicative of the predetermined portioi£)of the random file; 

A. A 

fnrmpfl of tha random daLen and the random file are reproduced. 

Based on the file storing the data indicative of the 
predetermined portion^jbf the reproduced random file, the 
decryption key is generated £rom Lhiffi andom data at the portions 
jzifithe random file;. By using the decryption key, the^ pncryp -b ion - 
information reproduced from the recording medium is decrypted. 
I- t i n- pQnni h lo to flo agyp fc . folio i nf nrnnt- iizsL^x^ n r ***iim^y f .^p,-.. 

According to the decrypting method of the present 
invent ion, |\by using fc he Lh i asd/lkey generated from/ po first 

32 



a ^ pt) r rypf i oa-key fge ne rated from <€5^inforniat ion inherent in^tEeT^ 
recording medium), and fl LUu auuuuJ key (independent of th^? £irot° 



encryption keyAj tho mformtion - ig sneyypUsA ,^ Theaf igstr 
A* 

doprypMnn Vny xs generated from the information inherent in the 



recording medium where the encrypted information is recorded. 
The thiiKi do^ryp L i c mA key is generated based on the n first ** 
^nrrypt- , i l nn lf , ny and frho cooe nd - d^ ai=ygfea?e^ key recorded oi^<th£ 
predetermined key medium ^mj-c^g iL uujjo iiding Lu Uim. M ^ nH 
en cryp t ion - koy By using the ^h»M ? d ■ de ^i j ypL "^eiy|key f the 
information encrypted by using thr^t- hirrl onrryp-H - nn key and 
reproduced from the recording medium is decrypted. 



Having described preferred embodiments of the present 
invention with reference to the accompanying drawings , it is to 
be understood that the present invention is not limited to the 
above-mentioned embodiments and that various changes and 
modifications can be effected therein by one skilled in the art 
without departing from the spirit or scope of the present 
invention as defined in the appended claims. 
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